
METHOD AND SYSTEM FOR MAINTAINING A 



COMMUNICATIONS PROTOCOL SESSION 



Inventors: 



Peter J. Churchyard 



5 



William P. Supernor 



Background 



Field of the Invention 

This invention generally relates to sustaining connections within communications 
10 networks. More specifically, the invention relates to maintaining a communications protocol 
session in a client/server architecture during periods of non-activity at the client. 



Description of the Related Art 



1 5 network (the "client" computer) will ultimately be connected during a session via a 

communications protocol to another computer (the "server" computer) in order for the client to 
utilize resources that may be available at the server. In typical communications network 
deployments, additional computers may serve as agents of the client as part of the 
communications path. For example, computer network 100 shown in Fig. 1 can contain agents 

20 such as proxies 1 10 and 160, and firewalls 120 and 150. In network 100, data travelling between 
client 130 and server 140 can first travel through proxy 1 10 and firewall 120, before reaching 
data communications network 190 (such as the Internet). Prior to reaching server 140, the data 
travels first through firewall 150 and proxy 160. 



In a distributed communications network, a user of a computer desiring to use the 
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Data communication protocols allow client 130 and server 140 to communicate with each 
other over communications network 190. For example, the well known Internet Protocol (IP), as 
described in Request for Comment (RFC) 791 (INTERNET PROTOCOL, DARPA INTERNET 
PROGRAM PROTOCOL SPECIFICATION, dated September 1981), and the well known 
5 Transmission Control Protocol (TCP) as described in RFC 793 (TRANSMISSION CONTROL 
PROTOCOL, DARPA INTERNET PROGRAM PROTOCOL, SPECIFICATION, dated 
September 1981) (together known as TCP/IP) can provide the necessary mechanisms that allow 
communications to pass between computers and other data processing devices using the Internet. 
Similarly, the well known Hypertext Transfer Protocol (HTTP), as described in RFC 2616 
1 0 (HYPERTEXT TRANSFER PROTOCOL - HTTP/1 .1), can provide the ability for 

communications to occur between clients and servers using the World Wide Web (WWW or 
Web). 

Certain processes that may occur at an agent of an entity communicating over a 
communications network can take a significant amount of time to complete. For example, 

1 5 activities related to checking for viruses (such as scanning a file requested by a client) can take a 
significant amount of time while executing at a firewall. While such activity takes place, the 
client machine may not sense any network activity and may incorrectly determine that the 
communications session has been terminated. For example, a lack of activity could be 
incorrectly perceived as a situation where the server has crashed or is otherwise not responding. 

20 Mechanisms have existed in the past for preserving network connections during periods 

of inactivity between the server and the client. For example, International Patent Application 
WO 99/26161 entitled "Controlled Distribution of Application Programs in a Computer 
Network", assigned to Trend Micro, Inc., discloses a method for establishing a bidirectional 
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communications link between a proxy and a client. The bidirectional link can then be used to 
provide a status to the client during any time-consuming server operations. However, this 
solution utilizes a separate software module that is downloaded from the server to the client. In a 
non-secure environment, this type of approach could introduce viruses or other malicious 
5 processes. In addition, this type of approach would consume resources on the client machine. 
Furthermore, in some network configurations (for example, those involving firewalls), a separate 
software module might be blocked from being received by the client. 

Consequently, a need exists for a data network system that overcomes the foregoing 
drawbacks. In particular, a method is needed for maintaining a communications protocol session 
1 0 between a client and a server during periods when time consuming processes are executed at 
agents of the client, without the dangers and disadvantages associated with downloading a 
separate piece of software. 



client and a server in a data communications network can be maintained, even when time- 
consuming activities may occur within various agents of the client. For example, a firewall may 
perform virus scanning for the client on one or more files that the client may have requested 
from the server. In some cases, particularly if one or more of the requested files are large in size, 
20 such an activity may take a significant amount of time. For some clients, this could result in an 
erroneous time out error, where the client incorrectly perceives the substantial delay as a 
non-response from the server. 



Summary of the Invention 
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In accordance with this invention, a data communications protocol session between a 
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When an agent determines that a particular operation may result in a time out by the 
client, the agent can send illusory content to the client that will cause the client to continue 
waiting for the actual response. This illusory content prevents the client from erroneously 
terminating the current operation, while at the same time preventing the client from interpreting 
the illusory content as the actual response to the request. 

In one embodiment, an agent can prepare a response message that contains an application 
specific entity-header. The entity header would be particular to the software running at that 
agent. Such a use of an entity header can cause the client to maintain the connection to the 
server, waiting for a response. 

Brief Description of the Dra wings 
Fig. 1 is a block diagram of a system according to the prior art for allowing data to travel 
between a client and a server over a communications network. 

Fig. 2 depicts a system according to the present invention. 

Fig. 3 depicts a response message in the HTTP communications protocol. 

Fig. 4 depicts a response message used in an embodiment of the present invention. 

Fig. 5 depicts another embodiment of the present invention. 

Detailed Description 
The present invention can allow an agent of a client in a client-server communications 
network to prevent erroneous termination of processing at the client that can occur during 
processing by the agent. By utilizing illusory content, the agent can sustain the communications 
session with the client and prevent a time out from occurring. The illusory content causes the 



client to not terminate the current communication session, while at the same time preventing the 
client from interpreting the illusory content as an actual response. 

Fig. 2 depicts a block diagram of an embodiment of the present invention showing a 
system 200 in which communications can occur between a client 230 and a server 240 over 
5 communications network 290. In general, client 230 can initiate a communications session with 
server 240 by sending request 2 1 5. For example, a user at client 230 may desire a particular file 
that the user might have found as a result of implementing a search for a data file on the Web. In 
particular, the user might want to download a large data file (such as a document or a video file). 

The user of client 230 may request that the data file be downloaded to client 230 by 
1 0 sending request 2 1 5 to proxy 2 1 0. Proxy 2 1 0 can then transmit that request to server 240 via 
communications network 290. Upon deciding that the user of client 230 may receive the 
requested data file, server 240 can send response 285 via communications network to proxy 210. 

Prior to sending the requested data file on to client 230, proxy 210 may perform 
additional processing. For example, proxy 210 may scan all files that it receives to avoid 
15 harmful or intrusive mechanisms, such as viruses, worms, or Trojan Horses. In other 

embodiments, proxy 210 may perform other content-scanning activities, such as searching for 
occurrences of certain text phrases in a file. Still other activities that could be performed at 
proxy 210 include, for example, (a) translating the content of a file from one language to another, 
(b) encrypting or decrypting the content of a file, or (c) verifying a public key digital signature 
20 that may have been applied to a file. 

While performing such additional processing, client 230 could mistakenly terminate the 
current communications session initiated by the sending of request 2 1 5, by misinterpreting the 
delay in receiving a response (that would result from the additional processing in proxy 210) as a 
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nonresponsive server. For example, when using the well known Internet Explorer browser for 
the Web, a request that does not receive a response in a particular amount of time (e.g. five 
minutes) will expire (or "time out"). 

In order to prevent such a time out, proxy 2 1 0 can first determine if such a time out will 
5 occur, by, for example, knowing what type of web browser is in use at the client. Then proxy 
210 can send a response to the request from client 230 that will cause client 230 to continue 
waiting for a valid response message to the request. The response is generally operative to 
prevent client 230 from interpreting a lack of response from the server as an error, but also 
prevents client 230 from not interpreting the response as a valid response to the previously sent 
10 request. In this manner, the response can be referred to as illusory content. This illusory content 
can cause client 230 to continue waiting for a valid response from the server, thus preventing the 
premature expiration of the communications session initiated by request 215 from the user of 
client 230. 

In general, although illusory content will be in conformance with the particular 
1 5 communications protocol in use, the illusory content may convey no meaning. In one 

embodiment, this will permit the illusory content to be recognized by the various entities in the 
communications network, but only to the extent that the illusory content should be sent on to the 
next entity. Thus, as further discussed with reference to Fig. 5 below, if the entity receiving the 
illusory content is a client, the illusory content can simply be ignored, and if the entity is an 
20 intermediate agent, the illusory content will simply be passed through. 

For example, upon receiving response 285 and then commencing additional processing, 
proxy 210 may send illusory content 255 to client 230 after determining that the additional 
processing may not complete until after client 230 expects a response. Further, proxy 210 may 
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send additional instances of illusory content to client 230, including, for example, illusory 
content 265 through illusory content 275, until proxy 210 completes its additional processing and 
can then transmit response 285. Since the amount of time in which client 230 may time out is 
known, the amount of time between instances of illusory content can be fixed at a threshold that 
5 is less than the time out value. For example, when using the Internet Explorer software package 
(made by Microsoft Corporation of Redmond, Washington) as client 230, a time out will occur 
in client 230 if a response is not received within a particular amount of time (e.g., five minutes) 
from the initial request. Thus, the amount of time sent between instances of illusory content can 
be set to a value less than that particular amount of time. 

10 Fig. 3 depicts a general response message 300, formatted according to the well known 

Hypertext Transmission Protocol (HTTP). As described above, a client can send a request to a 
server and the server can then return a response. When a server receives an HTTP request, it can 
locate the appropriate information being requested and return that information (or, alternatively, 
may return an error message). The HTTP response that it returns must have a particular form in 

1 5 order to be understood by the client. 

The first line of response message 300 can include several fields, including HTTP 
designator 305, HTTP version 310, status code 3 1 5, and a human readable text message 320 
corresponding to status code 315. The first line can be followed by header lines 325 and 330, 
which can contain information about the requested document. In general, a response message 

20 can contain as many header lines as required for the particular communication between the client 
and the server. The headers can end with a blank line, followed by document content 335. 

Fig. 4 depicts an example response message 400 according to an embodiment of the 
present invention. The first line contains HTTP designator 405, HTTP version 410, response 



code 415, and human-readable text 420, as described above with respect to Fig. 3. Header 470 
can contain an entity-header, as described in further detail below. Header 425 can contain the 
date that the particular message was sent and header 430 can contain the date that the content 
(i.e. file, in this example) was last modified. Header 435 can contain the size of the document in 
5 bytes and header 440 can contain an indication of the content type. The content-type field 440 
can be used by a web browser to indicate the format of the received document, whose content 
can be in field 445. For example, HTML content can be identified with "text/html", ordinary 
text can be identified with "text/plain", and a Graphics Interchange Format (GIF) image can be 
identified with M image/gif \ 

10 In general, header fields can contain a number of different types of metainformation, as 

described in RFC 2616. In particular, the metainformation can include information about the 
resource identified in the request message. Header fields may also be extended to allow for 
additional entity-header fields, also as defined in RFC 2616. These entity-header fields allow the 
protocol to be extended to meet the particular needs of a particular entity, but it is important to 

1 5 note that it cannot be assumed that the recipient of a message containing a user-defined 
entity-header will be able to recognize such a header. RFC 2616 specifically states that 
unrecognized header fields should be ignored by the recipient and must be forwarded by 
transparent proxies. 

In Fig. 4, entity-header 470 exemplifies a header that can allow the response to be used as 
20 illusory content. In particular, the "X-NAI-Sustain" label is not a part of the HTTP standard. 
Although it may be an unrecognized header to certain entities within the communications 
network, the response containing the unrecognized header will be transmitted on to the next 
entity in the communications network. In effect, the unrecognized header causes the response to 
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simply become a "pass through" message that gets passed on to the next entity in the network. 

Unlike other approaches that may, for example, utilize a downloaded piece of code to prevent 

time outs, the use of illusory content caused by an unrecognized header creates very little impact 

on the processing within the entities that do not recognize it. Upon reaching the client from 
5 whom the request was sent, the illusory content can prevent the client from timing out, again 

with little impact on the processing that may be occurring within the client. 

Fig. 5 depicts a block diagram of a use of the present invention showing a system 500 in 

which communications can occur between a client 530 and a server 540 over communications 

network 590. System 500 contains multiple agents for client 530, including proxy 510 and 
10 firewall 520. In general, client 530 can initiate a communications session with server 540 by 

sending request 515. For example, a user at client 530 might have found a new computer game 

program to run on the client. 

Upon the user's decision to download a particular file by, for example, clicking on a 

download button on a Web page, request 515 can be generated in client 530 according to the well 
1 5 known GET method in the HTTP protocol. Once generated, request 5 1 5 can travel to proxy 5 1 0 

which can then route the request to firewall 520. Firewall 520 can send the request on to 

communications network 590 (such as the Internet), after which the request can be received by 

server 540. 

Server 540 can respond to the request by generating a response message. In particular, 
20 server 540 can determine if client 530 has met all necessary requirements for receiving the 

computer program which it requested. For example, client 530 might need to register in order to 
receive the program and, furthermore, might need to pay for the program that it requested. Upon 
making the determination that client 530 can receive the requested file, server 540 can package 
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the requested file as required for HTTP transmission. Once properly packaged according to the 
requirements of the particular protocol, server 540 can transmit response 585, which can include 
the requested file, to client 530. Response 585 can then travel via communications network 590 
to firewall 520. 

5 Upon receiving response 585, firewall 520 may need to process the request further by, for 

example, decrypting the game file that might have been encrypted in response 585 or scanning 
the game file for viruses. If the time for the decryption or scanning process exceeds the 
threshold established for the particular software running on client 530, firewall 520 can send 
illusory content 552 to proxy 510. If proxy 510 recognizes the entity-header field included in 

10 illusory content 552, it will know that illusory content 555 needs to be passed on to client 530. 
Similarly, if proxy 510 does not recognize the entity-header field included in illusory content 
552, it will still pass illusory content 555 on to client 530 as required by the HTTP protocol. 

Since, in this embodiment, the invention addresses a time out issue, any intermediate 
agents (such as proxy 5 1 0) in the communications network must forward the illusory content in a 

15 reasonable amount of time such that the time out period will not expire. This reasonable amount 
of time may be chosen to accommodate any processing that might be done by the intermediate 
agent on the illusory content prior to being forwarded on to client 530. 

In the event that firewall 520 cannot complete its processing prior to a time out that may 
occur subsequent to illusory content 552 being sent to proxy 510, firewall 520 can, in a similar 

20 manner, send enough instances of illusory content (shown as illusory content 562 through 

illusory content 572) such that a time out will not occur. Those additional instances of illusory 
content 562 through 572 can then cause proxy 510 to pass illusory content messages 565 through 
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575 to client 530. When firewall 520 finishes its processing, it can then send the actual response 
585 to proxy 510 which can then send response 585 to client 530. 

While the invention has been described in detail, including references to specific 
embodiments, it will be apparent to one skilled in the art that changes and modifications can be 
5 made to the invention without departing from the spirit and scope thereof. Thus, it is intended 
that the present invention cover the modifications and variations of this invention provided they 
come within the scope of the appended claims and their equivalents. In particular, while the 
specific embodiment described above involves the HTTP protocol, an equivalent approach could 
be taken for other protocols, such as the well known Simple Mail Transport Protocol (SMTP), 
10 the Network News Transfer Protocol (NNTP), or any other protocol that enables transmission of 
illusory content as described above. 
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